News for hackers. Stuff that matters.

A comment on Tosh: Changing your SSH server's listen address every 30 seconds based on TOTP. Parent comment

Re:Tosh: Changing your SSH server's listen address every 30 ... by mercora on Sunday May 23, 2021 @03:21AM (#27253045)
at a previous job i cleaned up after such mess. they used to have fail2ban adding thousands of rules without ever deleting them automatically. I replaced it with a pam module that maintained an ipset for addresses with failed login attempts.
[ Parent | on HN ]
Re:Tosh: Changing your SSH server's listen address every 30 ... by _wldu on Sunday May 23, 2021 @11:03AM (#27255445)
ipset is very efficient.
[ Parent | on HN ]